Martijn Klingens wrote:
Since you're using masquerading, does bashfull send its replies back to the
director as gateway? Otherwise the masquerading obviously won't work. This is
especially tricky if both bashfull and the client are on the same subnet.
On the real server (bashfull) I have :
++++++++++++++++++++++++++++++++++++++++++++++++
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
192.168.1.0 192.168.1.254 255.255.255.0 UG 0 0 0 eth0
++++++++++++++++++++++++++++++++++++++++++++++++
On the node I have,
++++++++++++++++++++++++++++++++++++++++++++++++
[root@dhcp4 root]# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 192.168.1.0/24 anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
++++++++++++++++++++++++++++++++++++++++++++++++
and
++++++++++++++++++++++++++++++++++++++++++++++++
[root@dhcp4 root]# /sbin/ipvsadm -L
IP Virtual Server version 0.9.7 (size=65536)
Prot LocalAddress:Port Scheduler Flags
-> RemoteAddress:Port Forward Weight ActiveConn InActConn
TCP dhcp2.net:http rr
-> 192.168.1.4:http Masq 1 0 2
++++++++++++++++++++++++++++++++++++++++++++++++
Is there something I am missing?
|